DEFINING INTEGERS 



ALEXANDRA SHLAPENTOKH 



You can't always get what you want 
You can't always get what you want 
You can't always get what you want 
But if you try sometimes you might find 
You get what you need 



O 

(N 

^ Rolling Stones 

^- l. Prologue 

1.1. A Question and the Answer. The history of the problems discussed in this exposition goes 
back to a question that was posed by Hilbert in 1900: is there an algorithm which, given arbitrary 
polynomial equation in several variables over Z, determines whether such an equation has so- 
^ lutions in Z? (At the time Hilbert posed the question, a rigorous notion of the algorithm did not 

yet exist. So the version above is a modern interpretation of the question.) This question, being 
the tenth question on a list, became known as Hilbert's Tenth Problem (referred to as "HTP" in 
the future), and was answered negatively in the work of M. Davis, H. Putnam, J. Robinson and 
Yu. Matijasevich. (See CD, |6] and H3].) In fact, as we explain below, significantly more was 
shown: it was proved that recursively enumerable subsets of integers and Diophantine subsets 

O of integers were the same. We define these sets below. 

00 

Definition 1.1 (Recursive and Recursively Enumerable Subsets of Z). A set A c Z m is called re- 
cursive, computable or decidable if there is an algorithm (or a computer program) to determine 
the membership in the set. 

A set A c Z m is called recursively or computably enumerable if there is an algorithm (or a 
computer program) to list the set. 

• i-H 

^ The following theorem is a well-known result from Recursion Theory (see for example 1 26 1 [§ 1 . 9] ) . 

H 

Theorem 1.2. There exist recursively enumerable sets which are not recursive. 

We now define Diophantine sets in a somewhat more general setting. 

Definition 1.3 (Diophantine Sets: a Number-Theoretic Definition). Let R be a commutative 
ring with identity. (All the rings considered below satisfy these assumptions.) A subset Ac R m 
is called Diophantine over R if there exists a polynomial p{T\, . . . T m , X\, ... , X0 with coefficients 
in R such that for any element ( h , . . . , t m ) e R m we have that 

3xi,...,x k eZ: p(ti,...,t m ,xi,...,x k ) = 
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{t\,...,t m ) e A. 

In this case we call p(T\, . . . , T m , X\, X^) a Diophantine definition of A over R. 

Remark 1.4. Diophantine sets can also be described as the sets existentially definable in R in 
the language of rings or as projections of algebraic sets. 

Given the MDRP result we immediately obtain the following important corollary. 

Corollary 1.5. There are undecidable Diophantine subsets ofZ. 

It is easy to see that the existence of undecidable Diophantine sets implies that no algorithm 
as requested by Hilbert exists. Indeed, suppose A c Z is an undecidable Diophantine set with 
a Diophantine definition P{T, X\, X^). Assume also that we have an algorithm to determine 
the existence of integer solutions for polynomials. Now, let a e Z and observe that a e A if and 
only if P{a, X\, . . . , X K ) = has solutions in Z k . So if we can answer Hilbert's question effectively, 
we can determine the membership in A effectively. 

It is also not hard to see that Diophantine sets are recursively enumerable. Given a polyno- 
mial p{T,X) we can effectively list all t e Z such that p{t,X) = has a solution x e Z k in the 
following fashion. Using a recursive listing of Z k+1 , we can plug each (A; + l)-tuple into p{T, X) 
to see if the value is 0. Each time we get a zero we add the first element of the (A; + 1) -tuple to 
the £-list. 

1.2. Some Easy Facts or Getting Better Acquainted. A Diophantine set does not have to be 
complicated: one of the simplest Diophantine sets is the set of even integers 

{teZ\3weZ:t = 2u>}. 

To construct more complicated examples we need to establish some properties of Diophantine 
sets. 

Lemma 1.6. Intersections and unions of Diophantine sets over Z are Diophantine. 

Proof. Suppose P\{T, X),P 2 {T, Y) are Diophantine definitions of subsets Ai and A 2 of Z respec- 
tively over Z. In this case 

P 1 (T,X)P 2 (T,Y) 

is a Diophantine definition of A\ u A 2 , 
and 

P\{T,X) + Pl{T,Y) 

is a Diophantine definition of A\ n A 2 . □ 

The fact that over Z an intersection of Diophantine sets is Diophantine is related to another 
important aspect of Diophantine equations over Z: a finite system of equations is always equiv- 
alent to a single equation in the sense that both the system and the equation have the same so- 
lutions over Z and in the sense that given a finite system of equations, the equivalent equation 
can be constructed effectively. We prove this assertion in the lemma below. 

Lemma 1.7 (Replacing Finitely Many by One over Z). Any finite system of equations over Z can 
be effectively replaced by a single polynomial equation over Z with identical Z- solution set. 
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Proof. Consider a system of equations 



{gi{xi,...,x k ) = 
g 2 {xi,...,x k ) =0 
g m (xi,...,x fc ) = 

This system has solutions in Z if and only if the following equation has solutions in Z: 

gi (xi, . . . , x fc ) 2 + g 2 (xi, . . . , x fc ) 2 + . . . + g m {xi, . . . , x fc ) 2 = 

□ 

In fact we can replace a finite system of polynomial equations by an equivalent single poly- 
nomial equation over any integral domain R whose fraction field is not algebraically closed. 

Lemma 1.8 (Replacing Finitely Many by One over an Arbitrary Integral Domain ). LetR be any 
ring such that its fraction field K is not algebraically closed. In this case, any finite system of equa- 
tions over R can be replaced by a single polynomial equation over R with identical R -solution set. 

Proof. It is enough to consider the case of two equations: f{x\, x n ) = and g(xi, . . . , x n ) =0. 
If h(x) = £^ =0 aix 1 is a polynomial over R without any roots in K, then the polynomial 

k 

E a if( x l X n )g k ~ l (X± X n ) = 

has solutions in K if and only if f{x\, . ..,x n ) =0 and g(xi, . . . , x n ) = have a common solution 
inK. □ 

Remark 1.9. If the ring in question is recursive, i.e. there exists an injective map from the ring 
into Z such that the image of the ring is recursive and the ring operations are translated by 
recursive functions (functions whose graphs are recursive sets), then there exists a recursive 
function which can take the coefficients of the system equations as its inputs and output the 
coefficients of the corresponding single equation with the same solution set over the ring. For 
all the rings we consider in this exposition the construction of such a function, which would 
depend on a construction of an irreducible polynomial over the fraction field, is fairly straight- 
forward. However, in general, the situation can be a lot more complicated. 

We can use this property of finite systems to give more latitude to our Diophantine definitions 

Corollary 1.10. We can let the Diophantine definitions over Z consist of several polynomials 
without changing the nature of the relation. 

One surprisingly useful tool for writing Diophantine definitions has to do with an elementary 
property of GCD's (greatest common divisors). 

Proposition 1.11. If a, b e Z^ with (a, b) = 1 then there exist x, yeZ such that ax + by=l. 

The GCD's can be used to show that the set of non-zero integers is Diophantine and thus 
allow us to require that values of variables are not equal, as well as to perform "division" as will 
be shown later. On a more theoretical level we can say that the positive existential theory of Z is 
the same as the existential theory of Z. 
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Proposition 1.12. The set of non-zero integers has the following Diophantine definition over Z: 



{teZ\3x, u, v eZ: (2u- l)(3y- 1) = tx} 

Proof. If t = 0, then either 2i/-l = 0or3i/-l = has a solution in Z, which is impossible. 
Suppose now t ^ 0. Write r = ?2?3» where t 2 is odd and f 3 ^ mod 3. Since (?2»2) = 1 and 
(?3,3) = 1, by a property of GCD there exist u,x u , v,x v e Z such that 

2u+ t 2 x u = 1 

and 

3v + t 3 x v = 1. 

Thus {2u- \){3v- 1) = t 2 x u t 3 x v = t{x u x v ). □ 

Another important Diophantine definition allows us to convert inequalities into equations. 

Lemma 1.13 (Diophantine definition of the set of non-negative integers). From Lagrange's The- 
orem we get the following representation of non-negative integers: 

{t e Z|3jci, %2, X3, x 4 : t = x\ + x\ + x\ + x\} 

1.3. Becoming More Ambitious. The questioned posed by Hilbert about the ring of integers 
can of course be asked about any recursive ring R: is there an algorithm, which if given an ar- 
bitrary polynomial equation in several variables with coefficients in R, can determine whether 
this equation has solutions in Rl Arguably the most prominent open questions in the area are 
the decidability of an analog of Hilbert's Tenth Problem for R = Q and R equal to the ring of in- 
tegers of an arbitrary number field. The recent developments concerning these two problems 
are the main subjects of this exposition. 

Before we proceed further with our discussion of HTP over <Q> we would like to point out that 
it is not hard to see that decidability of HTP over Z would imply decidability of HTP for Q. 
Indeed, suppose we knew how to determine whether solutions exist over Z. If Q{x\, . . . , x k ) is a 
polynomial with integer coefficients, then 

3xi,...,x k eQ:Q{xi,...,x k ) = 


Vl Vfc 

3y±, ...,y k ,z 1 ,...,z k aZ: Q(— , . . . , — ) = A z x . . . z k ? 0, 

where we remind the reader we can rewrite z\ . . . z k ^ as a polynomial equation and convert 
the resulting finite system of equations into a single one. So if we can determine whether the 
resulting equation had solutions over Z, we can determine whether the original equation had 
solutions over Q. Unfortunately, the reverse implication does not work: we don't know of any 
easy way to derive the undecidability of HTP over Q from the analogous result over integers. As 
a matter of fact, as we will see below we don't know of any way of deriving the undecidability of 
HTP over Q (we are not even sure the problem is undecidable over Q). 

One of the earliest methods suggested for showing that HTP was undecidable over Q used 
Diophantine definitions. This idea can be summarized in the following lemma: 

Lemma 1.14. If J. has a Diophantine definition p{T,X) overQ, then HTP is not decidable over Q. 
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Proof. Let h{T\,...,Ti) be a polynomial with rational integer coefficients and consider the fol- 
lowing system of equations. 

h{T 1 ,...,T l )=0 
(1.1) P(2iA)=0 

p(T l ,X l )=0 

It is easy to see that h[Ti, . . . , T{) = has solutions in Z if and only if system fl.lf has solutions in 
Q. Thus if HTP is decidable over Q, it is decidable over Z. □ 

Unfortunately the Diophantine definition plan quickly ran into problems. 

2. Complications 

2.1. Some Unpleasant Thoughts. In 1992 Barry Mazur formulated a series of conjectures which 
were to play an important role in the development of the subject (see HU, H5), HE). Before we 
state one of these conjectures, we need a definition. 

Definition 2.1 (Affine Algebraic Sets and Varieties.). If {p\ [xy, . . ., x m ),. . . , pk&i, • • • . x m )} is a fi- 
nite set of polynomial equations over some field K, then the set of common zeros of these poly- 
nomials in K m is called an algebraic set. An algebraic set which is irreducible, i.e. is not a union 
of non-empty algebraic sets, is called a variety. 

Mazur's conjectures on the topology of rational points is stated below: 

Conjecture 2.2 (Topology of Rational Points). Let V be any variety over Q. Then the topological 
closure of V (Q>) in V (IR) possesses at most a finite number of connected components. 

This conjecture had an unpleasant consequence. 

Conjecture 2.3. There is no Diophantine definition of Z over (Q>. 

Mazur's conjecture also refers to projective varieties, but it is the affine variety case which has 
the most consequences for HTP over <Q>. We should also note that one can replace "variety" by 
"algebraic set" without changing the scope of the conjecture. (See Remark 11.1.2 of 133].) As a 



matter of fact, if Conjecture 2.2 is true, no infinite and discrete (in the archimedean topology) 
set has a Diophantine definition over Q. The affine version of Mazur's conjecture can be thought 
of in the following manner. Suppose you are given a system of polynomial equations: 



(2.2) 



Think of solutions to this system as points in U k but consider only the points whose coordinates 
are rational numbers. In other words we are interested in the set 

RP = {(xi, . . . , xjc) g Q k : (xi, . . . , Xfc) is a solution to system l|2.2)}. 



iMxi,.. 


.,X k ) 


= 


P 2 (Xi,.. 


■ ,x k ) 


= 


PmiXi,. 


..,x k ) 


= 



Now take the topological closure of RP in IR fc (i.e. the points plus the "boundary"). Mazur's 
conjecture asserts that the resulting set will have finitely many "connected pieces" also known 
as connected components. It is the finite number of these components that precludes Dio- 
phantine definability of infinite discrete subsets. 
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2.2. Introducing New Models. Since the plan to construct a Diophantine definition of Z over <Q> 
ran into substantial difficulties, alternative ways were considered for showing that HTP had no 
solution over Q. One of the alternative methods required construction of a Diophantine model 
ofZ. 

Definition 2.4 (Diophantine Model of Z). Let R be a recursive ring whose fraction field is not 
algebraically closed and let <p : Z — ► R k be a recursive injection mapping Diophantine sets of Z 
to Diophantine sets of R k . Then (p is called a Diophantine model of Z over R. 

Remark 2.5 (An Alternative Terminology from Model Theory). Model theorist have an alterna- 
tive terminology for a map described above. They would translate the statement that R has a 
Diophantine model of Z as Z being existentially definably interpretable in R. (See Chapter 1, 
Section 3 of H2.) 

It is not hard to see that sending Diophantine sets to Diophantine sets makes the map au- 
tomatically recursive. The recursiveness of the map follows from the fact that the 0-image of 
the graph of addition is Diophantine and therefore is recursively enumerable (by the same ar- 
gument as over Z). Thus, we have an effective listing of the set 

D+ = {{<p(m),<p(ri),(p(m + ri)), m,ne Z}. 

Assume we have computed <p(r - 1) for some positive integer r. Now start listing D+ until we 
come across a triple whose first two entries are (p(r - 1) and 0(1). The third element of the triple 
must be (p{r). We can simplify the requirements for the map further. 

Proposition 2.6. If R is a recursive ring and (p : Z — ► R k is injective for some k e Z>o, then (p is 
a Diophantine model if and only if the images of the graphs ofZ-addition and Z- multiplication 
are Diophantine overR. 

This proposition can be proved by a straightforward induction argument which we do not 
reproduce here. 

It quite easy to see that the following proposition holds. 

Proposition 2.7. IfR is a recursive ring with a Diophantine model ofZ, then HTP has no solution 
overR. 

Proof. If R has a Diophantine model of Z, then R has undecidable Diophantine sets, and the 
existence of undecidable Diophantine sets over R leads us to the undecidability of HTP over 
R in the same way as it happened over Z. To show that R has undecidable Diophantine sets, 
let Acz Z be an undecidable Diophantine set and suppose we want to determine whether an 
integer n e A. Instead of answering this question directly we can ask whether (p{ri) e (p(A). By 
assumption <p{n) is algorithmically computable. So if <p{A) is a computable subset of R, we have 
a contradiction. □ 

It now follows that constructing a Diophantine model of Z over <Q> will solve our problem. 

2.3. A Steep Curve. An old plan for building a Diophantine model of Z over Q involved using 
elliptic curves. Consider an equation of the form: 

(2.3) y 2 = x 3 + ax + b, 
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where a, b £ <Q> and A = -16(4a 3 + 27b 2 ) ^ 0. This equation defines an elliptic curve (a non- 
singular plane curve of genus 1). Figure [j] is the graph of such an elliptic curve y 2 = x 3 - 2x + 1 
generated using Maple. 

All the points (x, y) £ Q 2 satisfying l |2.3| l (if any) together with O - the "point at infinity" form 
an abelian group, i.e. there is a way to define addition on the points of an elliptic curve with 
O serving as the identity. The group law on an elliptic curve can be represented geometrically 
(see for example 1 36 1 [Chapter III, §3]). However, what is important to us is the algebraic repre- 
sentation of the group law. Let P = (x P , yp),Q = (xq, Vq), i? = {x R , y R ) be the points on an elliptic 
curve E with rational coordinates. lfP+ E Q = R and P,Q,R^ O, then x R = f{x P , y P , xq, vq), y R = 
g(xp,yp,XQ,yQ), where f{zi,Z2,Z3,Z4),g{zi,z 2 ,z^,Z4) are fixed (somewhat unpleasant looking) 
rational functions. Further, -P = (xp,-yp). Mordell-Weill Theorem (see 1361 [Chapter III1) tells 
us that the abelian group formed by points of an elliptic curve over Q is finitely generated, 
meaning it has a finite rank and a finite torsion subgroup. It is also not very difficult to find 
elliptic curves whose rank is one. So let E be such an elliptic curve defined over Q such that 
E(Q) = Z as abelian groups. (In other words Ij(<Q>) has no torsion points. In practice torsion 
points are not an impediment, but they do complicate the discussion.) Let Pi be a generator 
and consider a map sending an integer n ^ to [n]P - {x n ,y n ). (We should also take care of 0, 
but we will ignore this issue for the moment.) The group law assures us that under this map the 
image of the graph of addition is Diophantine. Unfortunately, it is not clear what happens to 
the image of the graph of multiplication. Nevertheless one might think that we have a starting 
point at least for our Diophantine model of Z. Unfortunately, it turns out that situation with 
Diophantine models is not any better than with Diophantine definitions. 

2.4. More Bad News. A new piece of bad news came in the guise of a theorem of Cornelissen 
and Zahidi (see |3]). 

Theorem 2.8. IfMazur's conjecture on topology of rational points holds, then there is no Dio- 
phantine model ofZ overty. 
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This theorem left HTP over Q completely unapproachable. It is often the case that faced 
with intractable difficulties, mathematicians escape by changing the problem. Depending on 
one's point of view of the subject one could consider changing the problem in different ways: a 
number theorist might consider changing the object or possibly summon a big conjecture for 
assistance; a logician might reconsider the ban on all universal quantifiers. Perhaps one or two 
should be allowed back. As it turned out all these paths were explored. Below we describe these 
new problems starting with the ones which considered alternate objects. 

3. Big and Small 

3.1. The Rings between Z and <Q>. The new objects which were introduced into the subject were 
the rings "in between" Z and Q. 

Definition 3.1 (A Ring in between). Let 5? be a set of primes of Q. Let Oq t y be the following 
subring of Q. 

C YYl i 

\ — : m, n £ Z, n ^ 0, n is divisible by primes of 5? only \ 
t n > 

If y = 0, then Oq t y = Z. If 5? contains all the primes of Q, then O^y = Q. If is finite, we 

call the ring small. If 5? is infinite, we call the ring large or big, and if the natural density of 5? is 

equal to 1, we call the ring very large or very big. 

Some of these rings have other (canonical) names: the small rings are also called rings of 
^-integers, and when 5? contains all but finitely many primes, the rings are called semi-local 
sub rings of Q. The definition of very large rings uses the notion of natural density of a prime set 
stated below. 

Definition 3.2 (Natural Density). If srf is a set of primes, then the natural density of srf is equal 
to the limit below (if it exists): 

.. #{peA,p<X} 

X^oo #{p < X} 

The big and small rings are not hard to construct. 

Example 3.3 (A Small Ring not Equal to Z). 

m 

{ r :meZ,a,be Z >0 } 

3 a 5 b 

Example 3.4 (A Big Ring not Equal to Q). 

m 

{——fr:pi = l mod 4, e Z >0 } 
YlPt' 

Given a big or a small ring R we can now ask the following questions which were raised above 
with respect to Q: 

• Is HTP solvable over i?? 

• Do integers have a Diophantine definition over Rl 

• Is there a Diophantine model of integers over Rl 

While the answers to these questions are interesting on their own right, the hope (possibly un- 
justified) is that understanding the big rings will eventually lead us to Q. 
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3.2. Diophantine Properties of Big and Small Rings. Before trying to answer the questions 
above, one should observe that the big and small rings share many Diophantine properties 
with the integers: 

Proposition 3.5. (1) The set of non-zero elements of a big or a small ring is Diophantine over 
the ring. 

(2) "One=flnitely many" over big and small rings. 

(3) Thesetof non-negative elements of a big or a small ring R is Diophantine over R: asmall 
modification of the Lagrange argument is required to accommodate possible denomina- 
tors 

{t e R\3x\, X2, X3, X4, X5 : X5 1 = x 2 + X2 + x 2 + x 2 A X5 7^ 0} 

It turned out that we already knew everything we needed to know about small rings from the 
work of Julia Robinson (see |25|). In particular from her work on the first-order definability of 
integers over Q one can deduce the following theorem and corollary. 

Theorem 3.6 (Julia Robinson). Z has a Diophantine definition over any small subring of<Q>. 

Corollary 3.7. HTP is unsolvable over all small subrings ofQ. 

Over large rings the questions turned out to be far more difficult. 

4. A Different Model 

4.1. Existential Model of Z over a Very Large Subring. In 2003 Poonen in |20| proved the first 
result on Diophantine undecidability (unsolvability of HTP) over a big subring of <Q>. 

Theorem 4.1. There exist recursive sets of primes S?\ and both of natural density zero and 
with an empty intersection, such that for any set y of primes containing 2?\ and avoiding 
the following hold: 

• Z has a Diophantine model over Oq,y. 

• Hubert's Tenth Problem is undecidable over O^y. 

Poonen used elliptic curves to prove his result but the model he constructed was very differ- 
ent from the one envisioned by the old elliptic curve plan we described earlier. Poonen modeled 
integers by approximation. The construction of the model does start with an elliptic curve of 
rank one 

(4.4) E : y 2 = x 3 + ax + b 

selected so that for a set of primes y, except possibly for finitely many points, the only mul- 
tiples of a generator P that have their affine coordinates in the ring Oq t y are in the sequence 
[+£i]P = {x£ i ,±y£ i ) with \y#. - j\ < 10~ J . We remind the reader that we know how to define 



positive numbers using a variation on Lagrange's theme (Proposition |3.5| and how to get rid of 
a finite set of undesirable values such as points of finite order (just say V" as in Proposition[3T5 
again). We claim that (p : j — ► y^. is a Diophantine model of Z >0 . In other words we claim that 
(p is an injection and the following sets are Diophantine: 

D+ = {{yet , y£j , ye k ) eD 3 :k=i + j, k, i, j e Z> } 

and 

D 2 = {(ye v ye k ) eD 2 :k = i 2 , i e Z >0 }. 



(Note that if D+ and D 2 are Diophantine, then D x = { [yg. , yg. , yg k ) e D 3 : k = ij, k, i,je Z>ol is 
also Diophantine since xy= ^((x + y) 2 - x 2 - y 2 ).) It is easy to show that 

k = i + ; o \y £ . + yg. - yg k | < 1/3. 
and with the help of Lagrange this makes D+ Diophantine. Similarly we have that 

k=i 2 o\y% i -ye k \<2/5, 

implying that D 2 is Diophantine. 

To restrict the number of solutions to the elliptic curve equation, Poonen's construction relied 
to a large extent on the fact that the denominators of the coordinates of points on an elliptic 
curve which are multiples of a single point form a divisibility sequence: an integer sequence 
{a n } is called a divisibility sequence if n\m implies a n \a m (see Chapter 4 and Chapter 10 of [LT] 
for a discussion of such sequences and see the discussion of the formal group of an elliptic curve 
in Chapter 4 of |36| for an explanation of why the denominators form a divisibility sequence). 
We now take a closer look at these denominators. 

4.2. The Denominators of Points on an Elliptic Curve. Let E be an elliptic curve as in jO), 
fix a point of infinite order Pi = {xi,y{j on the curve and let P n = [x n ,y n ) = [n]P\ be the n-th 
multiple of Pi for a non-zero integer n. In the notation above, using properties of elliptic curves 
one can show with various degrees of difficulty that the following statements are true: 

• The same primes divide the (reduced) denominators of x n and y n , and therefore we can 
speak about primes dividing the "denominator" of P n . (This follows from looking at the 
elliptic curve equation we use.) 

• For all n sufficiently large in absolute value, it is the case that P n has a primitive divisor, 
i.e. a prime dividing the "denominator" of P n but not the "denominator" of any P m with 
\m\ < \n\. Denote the largest primitive divisor of P n by p n . We call p n an an indicator 
prime. (This can be deduced from the rate of growth of denominators relative to the rate 
of growth of the exponents of the primes dividing the denominators.) 

• (denom(x„),denom(x TO )) = denom(X( mi „)) for sufficiently large |m| and \n\ and therefore 
denom(x m ) divides denom(x w ) if and only if m divides n (again for sufficiently large | m \ 
and \ n\). (This properly uses the existence of primitive divisors as well as the fact that 
the denominators form a divisibility sequence.) 

• Poonen showed that the set {pg : £ is a prime numer } has natural density equal to 0. 
(This density result was proved using some results of Serre and was probably the most 
technically challenging part of Poonen's paper.) 

Now it is not hard to see that if is not allowed in the denominators of the elements of our 
big ring, then the coordinates of the point [^]Pi = (x^,}y) will not be solutions to the elliptic 
curve curve equation in our ring. Further, we will also exclude all the multiples of this point 
but will not affect the points whose indices are prime to £. This is the principal mechanism for 
controlling which solutions to the elliptic curve equation appear in our ring. 

In a 2009 paper (see [10]) Eisentrager and Everest extended Poonen's method to prove a the- 
orem concerning sets of complementary primes. If & is the set of all primes of Q, then two 
subsets 2? ,5? c are exactly complementary if 5? u - 3? and 5? n 3? = 0. We state this 
theorem below. 

Theorem 4.2. There are exactly complementary recursive sets y, c & such that Hilbert's 
Tenth Problem is undecidable for both rings 0^ t y and Oq,^ . 
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5. Old Dreams Die Hard 



So what about the old plan for modeling Z using indices of elliptic curve points? As it turns 
out the old plan can be resurrected but not exactly as intended. We remind the reader that the 
stumbling block for that plan was showing that the set {(x n ,y n ), [x m , y m ), {x nm , y nm )} was Dio- 
phantine over Q, where {x n , y n ) are the affine coordinates of an n-th multiple of a generator of 



an elliptic curve of rank one over <Q>. (See Section |23| ) We manage to make this set Diophantine 
but only over some very big rings. To do this we modify Poonen's idea by not inverting any in- 
dicator primes pg. In this case no point of the elliptic curve has coordinates in our ring and we 
have to represent a point by a quadruple of numerators and denominators. While this is more 
awkward, we can derive some benefits. 

5.1. Defining Multiplication of Indices. The main result pertaining to index multiplication is 
stated below. 

Theorem 5.1. Let E be an elliptic curve defined and of rank one over Q. Let P be a generator 
ofE(Q) modulo the torsion subgroup, and fix an affine (Weierstrass) equation for E of the form 
y 2 = x 3 + ax + b, with a,beZ. If{x n ,y n ) are the coordinates of[n]P with n^O derived from this 
(Weierstrass) equation, then there exists a set of primes W of natural density one, and a positive 
integer m such that the following set U <= O 12 ^ is Diophantine over Oq^ . 

(c/i, u 2 , u 3 ,x 1 ,x 2 ,x 3 , v lt v 2 , v 3 , Y lt y 2 , y 3 ) g n o 

3 unique k\, k 2 , k 3 £ Z^o such that 
(if-ff) = ix moki ,y moki ), fori = 1,2,3, andk 3 = k l k 2 . 

(See E7|.) 

We outline the proof under some simplifying assumptions. Let E as before be an elliptic curve 
of rank one defined over (Q> and let E{Q) be the set of all the points of the curve with rational co- 
ordinates together with O - the point at infinity. For a generator P of E(Q), for n e Z^ , we let 
[n]P = (x n ,y n ) = e Q 2 , where V n >0,Y n > 0, {U n , V n ) = 1, {X n , Y n ) = 1, U n , V n ,X n , Y n e Z. 

(We are still using a (Weierstrass) equation of our elliptic curve of the form y 2 = x 3 + ax + b.) We 
assume that every non-trivial multiple of the generator P has an odd primitive divisor, i.e. for 
every n £ Z^ ,±i there exists a prime p ^ 2 such that p\V n but p Wm for any m with | m\ < \ n\. We 
also assume that coordinates of P are integers. A point P n will now be represented by a quadru- 
ple (A n ,B n , C n ,D n ) of elements in our ring and this representation will not be unique because 
while it is possible to require that a numerator and the denominator are relatively prime in our 
big ring, big rings in general have infinitely many units and this will stand in a way of a unique 
representation of a point. In our big ring we do not invert the set 

Y = {The largest odd primitive prime factor p ( i of V e i}, 

where £ runs through all the prime numbers and i eZ >0 . Not inverting these primes will ensure 
that denom(x m ) divides denom(x M ) if and only if m divides n. We invert all the other primes. In 
the resulting big ring we now have that 

{V m ,V n ) = \,{m,V n ),{n,V m ) = l,V m V n \V k AV k \V m V n =^ \k\ = \mn\. 

More work is required to get rid of the absolute values and to remove the relative primeness 
condition, but that task can be accomplished with standard methods. Given that each point 
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of the elliptic curve has infinitely many quadruples representing it we cannot construct a Dio- 
phantine model of Z (or show that Z is existentially definably interpretable in Oq^) as above. 
What we can do is construct a class Diophantine model of Z defined below. (The corresponding 
model-theoretic notion is existential interpretability. Again see Chapter 1, Section 3 of 021.) 

Definition 5.2 (Class Diophantine Model). Let R be a countable recursive ring, let D c R k , k e 
Z> be a Diophantine subset, and let « be a (Diophantine) equivalence relation on D, i.e assume 
that the set {(x, y) : x, y e D, x « y} is a Diophantine subset of R 2k . Let D = [Jiez Di, where D ; is 
an equivalence class of «, and let (p : Z — ► {Di, i e Z} be defined by = Di. Finally assume 
that the sets 

Plus= {{x,y,z) : x e Di,y e Dj,z£ Di+j} 

and 

Times = {{x,y,z) :x£Di,y£Dj,z£Dij} 
are Diophantine over R. In this case we say that R has a class Diophantine model of Z. 

It is not hard to show that the rings with class Diophantine models of Z have undecidable 
Diophantine sets, just as the rings with Diophantine models of Z. As as result of our ability to 
give a Diophantine definition of multiplication of indices we can construct a class Diophantine 
model of Z over a class of big subrings of Q not covered by the results of Poonen or Eisentrager 
and Everest. 

Corollary 5.3. In the notation above, for n ^ let(p(n) = [{U mon ,X mn , V mn , Y mon )], the equiv- 
alence class of (U mon , X mon , V mQYl , Y mQn ) under the equivalence relation described below, where 



ITT Y 



Let 0(0) 



Umon>X mon , Vmon>Ymon ^ OiQ ti y,V mQn Y mQn ^ 0, and {x mQn ,y mQn ) , 

\ Vm n Y mo n , 

{(0,0,0,0)}. Then (f> is a class Diophantine model ofZ. (Here ifVVYY ^ we set {U,X, V, Y) « 

— — „ , , M U ,1 X 
{U,X, V, Y) if and only if V = — and -r = —.) 

We have now pretty much covered the state of existential affairs and it is time to return to 
the issue of lifting the ban on a few universal quantifiers. One could interpret this as a sign 
of surrender in the face of the overwhelming enemy (i.e. HTP for Q), but we prefer a more 
optimistic interpretation: a gradual gathering of forces. 

6. Matters of the First Order or Back to the Future 

The result defining integers over Q using the "full force" of the first-order language is pretty 
old and belongs to Julia Robinson. 

Theorem 6.1 (Julia Robinson). Z is first-order definable over ■(). (See\25\.) 

Julia Robinson used quadratic forms and Hasse-Minkwoski Theorem to prove her theorem 
and in the process produced an existential definition over Q of the set 

a 

lntn = {xe<Q:x= -,a,beZ,b^0 mod q} 
b 

for any given prime q. It is this existential definition and the fact that we can "simulate" the de- 
nominators because we can define the set of non-zero elements of any small ring, that allowed 
us to conclude that Z was existentially definable over small rings. 
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In a 2007 paper Cornelissen and Zahidi analyzed Julia Robinson's formula and showed that it 
can be converted to a formula of the form (V3 V3) [F = 0) where the V-quantifiers run over a total 
of 8 variables, and where F is a polynomial. They also were the first ones to consider optimizing 
Julia Robinson's result using elliptic divisibility sequences: 

Theorem 6.2 (Cornelissen and Zahidi). Assuming a (heuristically plausible) conjecture concern- 
ing denominators of points on elliptic curves over Q, there exists a first-order model of J. over Q 
using just one universal quantifier. (See H) J 

And so a conjecture makes its appearance to help push a result along, though not yet a fa- 
mous conjecture. 

In a 2007 paper (see [2|), using elliptic curves along the lines of Poonen's method and results 
of Julia Robinson, Cornelissen and the author showed that one could define Z over a large sub- 
ring of Q using two universal quantifiers. Continuing further down this road, in 2008 Poonen 
in ||23 1 produced an unconditional improvement of the first-order definition of integers over Q> 
and over some big rings. 

Theorem 6.3. • Z is definable over <Q> using just two universal quantifiers in a V3 -formula. 
• For any e > 0, there exists a set of rational primes Wq of natural density greater than l-e 
such that Z is definable using just one quantifier in a V3 -formula over Oq^ q . 

Poonen used quadratic forms, quaternions and the Hasse Norm Principle. His definition of 
Z over Q is simple enough to be reproduced here: the set Z equals the set of t e Q> for which the 
following formula is true over Q: 

(Va, b) (3ai, a 2 , a 3 , a 4 , b\, b 2 , b 3 , b 4 , Xi,x 2 , x 3 , x 4 , y lt y 2 , y 3 , y 4 , ri) 

(a + a\ + a\ + a 2 + a\) {b + b\ + b\ + bl + b\)- 

[{x\ - ax\ - bx\ + abxj - l) 2 + (y 2 - ay\ - by\ + aby\ - 1) 2 + 

+ n 2 + (n-l) 2 ...(rc-2309) 2 + (2xi+2yi + rc- tf] =0 

Using existential definition of multiplication on indices one can also show the following. 

Theorem 6.4. There exists a set W of primes ofQ of natural density one such that Z is first-order 
definable over Oq^ using just one universal quantifier in a \/3-formula. (See 127] .) 

Further the following result was announced by J. Koenigsmann in February 2009. 

Theorem 6.5. Z is first-order definable over Q using just one V -quantifier in a V3 - formula. 

To summarize the discussion so far we can conceive of the following big definability project 



partly discussed already in Section 3.1 



Question 6.6. For which big subrings of Q is the following true? 

• Z is existentially definable. 

• Z has an existential model. 

• Z is definable using one universal quantifier. 

Remark 6.7. If we start counting the number of quantifiers we use, definability results over the 
field will no longer automatically imply the analogous definability results for the subrings. Thus 
Koenigsman's result for <Q> does not automatically answer the question about the big subrings in 
general. 
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We now briefly consider the progress made on the other arguably most interesting problem 
in the area: the Diophantine (un) decidability of the rings of integers of number fields. 

7. Meanwhile in a Galaxy not Far Away 

We start with a review of some terms. 

• A number field is a finite extension of Q. 

• A totally real number field is a number field all of whose embeddings into its algebraic 
closure are real. 

• A ring of integers Ok of a number field K is the set of all elements of the number field 
satisfying monic irreducible polynomials over Z or alternatively the integral closure of Z 
in the number field. 

• A prime of a number field K is a prime ideal of Ok- If x ^ and x e Ok, then for any 
prime p of K there exists a non-negative integer m such that x £ p m but x &p m+1 . We 
call m the order of x at p and write m = ord p x. If y e K and y ^ 0, we write y = ^, 
where Xi,X2 £ Ok with X1X2 ^ 0, and define ord p y = ordpXi - ord p X2. This definition is 
not dependent on the choice of Xi and X2 which are of course not unique. We define 
ordpO = 00 for any prime p of K. 

• Any prime ideal p of Ok is maximal and the residue classes of Ok modulo p form a field. 
This field is always finite and its size (a power of a rational prime number) is call the 
norm of p denoted by Np. 

• If W is a set of primes of K, its natural density is defined to be the following limit if it 
exists: 

#{p£yr,Np<x} 

lim 

#{Np < X} 

• Let K be a number field and let W be a set of primes of K. Let Ok,w be the following 
subring of K. 

{xeK:or& v x>0\l\s$.W} 

IfW = 0, then K ,w = Ok- the ring of integers of K. If W contains all the primes of K, 
then Ok,w = K. IfW is finite, we call the ring small (or the ring of ^-integers). If W 
is infinite, we call the ring large, and if the natural density of W is one, we call the ring 
"very large". These rings are the counterparts of the "in between" subrings of <Q>. 

The state of knowledge concerning the rings of integers is summarized in the theorem below. 

Theorem 7.1. Z is Diophantine and HTP is unsolvable over the rings of integers of the following 
fields: 

• "Most" extensions of degree 4 ofQ, totally real number fields and their extensions of degree 
2. (See |7] , 18) .) Note that these fields include all abelian extensions. 

• Number fields with exactly one pair of non-real embeddings (See \ 18] and [28 1 .) 

• Any number field K such that there exists an elliptic curve E of positive rank defined over 
Q with [E(K) : E(Q)] < 00. (See ETJ, EH, EH J 

• Any number field K such that there exists an elliptic curve of rank 1 over K and an abelian 
variety over Q keeping its rank over K. (See Q] .) 

We also have several results concerning big rings in number fields. Note that in the big rings 
below we actually give a Diophantine definition of Z. 
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Theorem 7.2. Let Kbea number field satisfying one of the following conditions: 

• K is a totally real field. 

• K is an extension of degree 2 of a totally real field. 

• There exists an elliptic curve E defined over Q such that [E(K) : E{Q)] < oo. 
Lete > be given. Then there exists a set y of non-archimedean primes ofK such that 

• The natural density ofy is greater 1 - ^~Qj ~~ £ - 

• Z is Diophantine over O^y. 

• HTP is unsolvable over K> y . 

(See EH], EQ), EH, EH, ESI J 

Over very large sub rings, as was the case over Q, we have Diophantine models of Z only. The 
first theorem is a number field version of Poonen's method for Q. However the situation is more 
complicated over a number field and instead of constructing a model of Z by "approximation", 
what is constructed here is a model of a subset of the rational integers over which one can 
construct a model of Z. In short, one constructs a "model of a model". 

Theorem 7.3. Let K be a number field with a rank one elliptic curve. Then there exist recursive 
sets ofK-primes S?\ and S? 2 , both of natural density zero and with an empty intersection, such 
that for any set y of primes ofK containing 3\ and avoiding 2? 2 , Z has an existential model and 
Hilbert's Tenth Problem is unsolvable over Ok,^- (See |24] .) 

There is also a version of index multiplication over number fields. Here the strategy remains 
the same as over Q. 

Theorem 7.4. LetK be a number field. LetE be an elliptic curve defined and of rank one overK. 
LetP be a generator ofE{K) modulo the torsion subgroup, and fix an affine Weierstrass equation 
for E of the form y 2 = x 3 + ax + b, with a, be Ok- Let [x n , y n ) be the coordinates of[n]P with n^O 
derived from this Weierstrass equation. Then there exists a recursive set of K -primes Wk of natural 
density one, and a positive integer mo such that the following set Yl c O 12 ^ is Diophantine over 

K ,W K : 

[U h U 2 , U 3 ,X lt X 2 ,X 3 , Vi, V 2 , V 3 , Y lt Y 2 , F 3 )eno 
3 unique k\, k 2 , k$ £ Z^o such that 

(if 'fi) = ^moki'Vmoki)' f ori = l > 2 > 3 > andk 3 = k x k 2 , 

Z has a class Diophantine model, and HTP is unsolvable over this ring. 
SeeW\ 



Theorems 7.1 - 7.4 have an elliptic curve assumption in their statements. These assump- 
tions come in two flavors: an existence of a rank one elliptic curve over a field in question and 
an assumption concerning an elliptic curve of positive rank, not changing its rank in a finite 
extension. The rank one assumption is pretty straightforward but the "positive stable rank" as- 
sumption can be modified. It is not hard to show that it is enough to have a "positive stable 
rank" phenomenon for every cyclic extension of prime degree to obtain a Diophantine defi- 
nition of Z over the ring of integers of any number field. The reduction takes place in several 
steps. 
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(1) Let K be a number field and let Ok be the ring of integers of K. Further, let M be the 
Galois closure of K over Q and let Om be the ring of integers of M. Under these assump- 
tions if Z has a Diophantine definition over Om, then Z has a Diophantine definition 
over Ok- (Thus we can consider Galois extensions of Q only.) 

(2) Let M/<Q> be a Galois extension of number fields with Om the rings of integers of M re- 
spectively. Let Ei , . . . , E n be all the cyclic subextensions of M with Oe 1 Os n the rings of 
integers of E\ E n respectively. Observe that n"_i &i = Q and f|f =1 O^. = Z and there- 
fore if each has a Diophantine definition over Om, then Z has a Diophantine def- 
inition over Om- (Thus, it is enough to show that in every cyclic extension the ring of 
integers below has a Diophantine definition over the ring of integers above.) 

(3) If E Q H c M is a finite extension of number fields, Oh has a Diophantine definition over 
Om, and Oe has a Diophantine definition over Oh, then O^ has a Diophantine definition 
over Om- (Thus, it is enough to consider cyclic extensions of prime degree only.) 

In the case of big rings the same kind of reductions also work, but an extra effort is required to 
make sure the sets of primes allowed in the denominators have the right density. For a general 
discussion of reductions of this sort see |31 1 and Chapter 2 of (33] . 

Unfortunately as of now we do not have unconditional results asserting the existence of re- 
quired elliptic curves, but with a "little help" from this time a famous conjecture we do have the 
following recent result by Mazur and Rubin. 

Theorem 7.5. Suppose L/Kis a cyclic extension of prime degree of number fields. If the Shafarevich- 
Tate Conjecture is true for K, then there is an elliptic curve E over K with rank(E(L)) = rank(E(K)) 
= 1. (See EH. ) 

As discussed above, this theorem has quite a few consequences. 

Corollary 7.6. If the Shafarevich-Tate Conjecture is true for all number fields, then the following 
statements are true. 

• Z has a Diophantine definition over the ring of integers of any number field K. 

• For any number field K and any e>0, there exists a set 5? of non-archimedean primes of 

K such that the natural density of y is greater 1 - — ^ - e and Z is Diophantine over 
OK,y- 

• For any number field K, there exists a set of primes 5? of natural density 1 such that Z has 
a Diophantine model over Ki y. 

8. Final Remarks 

This article touched only on a small part of the subject which grew out of Hilbert's Tenth 
Problem. In particular, we did not discuss a great number of results on the analogs of HTP 
over different kinds of functions fields and infinite algebraic extensions, and also rings where 
the problem becomes decidable. We refer the interested reader to the following surveys and 
collections for more information: 0, |22 | and |33). 
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